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DETAILED ACTION 
Claims 1-41 have been examined. 

Claims 1-3 and 7-16 are rejected under 35 U.S.C. 112, 2 nd paragraph. 
Claims 1-41 is rejected under 35 U.S.C. 102(e). 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and 
distinctly claiming the subject matter which the applicant regards as his invention. 

4. Claims 1-3 and 7-16 are rejected under 35 U.S.C. 112, second 
paragraph, as being indefinite for failing to particularly point out and 
distinctly claim the subject matter which applicant regards as the 
invention. 

Claim 1 , states "to decrypt an encrypted data file provided by the user into the 
encryption key" is vague. It is unclear what is "into the encryption key" after 
decrypting the encrypted data file. Is this a process of generating an 
encryption key? 

Claim 7, states "decrypting the encrypted data file using the password, into an 
authenticated encryption key" is vague. It is unclear what is "into the 
authenticated encryption key" after decrypting the encrypted data file. Does 
decrypted the encrypted data file become the authenticated encryption key? 



1. 
2. 
3. 
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Claim i 3, states "to decrypt an encrypted data file provided by the user into an 
authenticated encryption key" is vague. It is unclear what is "into the 
encryption key" after decrypting the encrypted data file. By decrypting the 
encrypted data file, does this lead into generating or becoming a different key? 
All other claims are rejected by virtue of their dependency. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another 
filed in the United States before the invention thereof by the applicant for patent, or on an 
international application by another who has fulfilled the requirements of paragraphs (1), 
(2), and (4) of section 371(c) of this title before the invention thereof by the applicant for 
patent. 

The changes made to 35 U. S. C. 1 02(e) by the American Inventors Protection Act of 
1 999 (AIPA) and the Intellectual Property and High Technology Technical Amendments 
Act of 2002 do not apply when the reference is a U.S. patent resulting directly or 
indirectly from ah international application filed before November 29, 2000. Therefore, 
the prior art date of the reference is determined under 35 U.S.C. 102(e) prior to the 
amendment by the AIPA (pre-AIPA 35 U. S. C. 1 02(e)). 

5. Claims 1-41 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Thomlins n, Bt Al. (US 6,532,542). 
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As p r claim 1: 

Thomlinson teaches a system for authenticating an encryption key of a 
user comprising a decrypt engine for using a password (col. 10, lines 1-6) 
provided by the user to decrypt an encrypted data file (col. 10, lines 12-15) 
provided by the user into the encryption key of the user (col. 1 0, lines 15-25) . 
As per claim 2: 

Thomlinson teaches the encrypted data file is stored on an RF smart card 
(col. 7, lines 2-10). 
As per claim 3: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col. 9, line 54). 
As per claim 7: 

Thomlinson teaches a method for providing an authenticated encryption 
key of a user, comprising the steps of providing an encrypted data file (col. 10, 
lines 43-45), providing a password (col. 10, lines 1-3), and decrypting the 
encrypted data file using the password into an authenticated encryption key of 
User (col. 11, lines 2-25). 
As per claim 8: 

Thomlinson teaches the encrypted data file is stored oh an RF smart card 
(col.7, lines 2-10). 
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As per claim 9: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col. 9, line 54). 
As per claim 10: 

The Examiner ascertains that a digitized fingerprint of the user is inherently 
one of many types of biometric data. 
As per claim 11: 

Thomlinson discusses the different types of access styles that can be 
used to access iterhs (data files) in protected storage wherein the method 
includes a scanner as one of the input devices used to enter commands and 
information to the computer (col. 5, lines 24-28) and biometric authentication 
procedures (col. 9, lines 47-54). Thus, the Examiner asserts it is inherent that 
Thomlirtsbn teaches the method of generating biometric data of the user by 
scanning the biometric feature of the user and comparing the generated 
biometric data of the user to the data derived from the encrypted data file to 
authenticate the encryption key of the user (col. 10, lines 30-42). 
As per claim 12: 

The Examiner ascertains that a digitized fingerprint of the user is inherently 
one of many type's of biometric data. 
As per claim 13: 

Thomlinson discloses a computer accessible medium comprising 
program instructions (col. 4, lines 35-36) for providing an authenticated 
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encryption key of a user by using a password provided by the user to decrypt 
an encrypted data file provided by the user into an authenticated encryption 
key of the user (col. 10, lines 1-46). 
As per claim 14: 

Thomlinsoh teaches the encrypted data file includes encrypted biometric 
data identifying the user (col. 9, line 54). The Examiner ascertains that a 
digitized fingerprint of the user is inherently one of many types of biometric 
data. 

As per claim 15: See col. 12, lines 2-59; discussing the comparing or verifying 
process of the encrypted data file. 
As per claim 16: 

As rejected with the same rationale of claim 14 and further includes 
Thomlinson discussing the encrypted data file includes encrypted biometric 
data identifying the user (col. 9, line 54). The Examiner ascertains that a 
digitized fingerprint of the user is inherently one of many types of biometric 
data. 

As per claim 17: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein includes an input 
device used to enter commands and information such as a keyboard to receive 
a password from a user (col. 5, lines 24-28). Further, Thomlinson include 
memory for storing an encrypted data file including an encryption key of the 
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user (col.i l, lines 7-26) and a decrypt engine for using a password (col. 10, 
lines 1-6) to decrypt an encrypted data file (col. 10, lines 12-15) and thereby 
generating an authenticated the encryption key of the user (col. 10, lines 15- 
25). 

As per claim 18: 

Thomlinson teaches the encrypted data file is stored on an RF smart card 
(col.7, lines 2-10). 
As per claim 19: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col. 9, line 54). 
As per claim 20: 

The Examiner ascertains that a digitized fingerprint of the user is inherently 
one of many types of biometric data. 

As per claim 21: See col. 12, lines 2-59; discussing the comparing or verifying 
process of the encrypted data file. 
As per claim 22: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein the method 
includes a scanner as one of the input devices used to enter commands and 
information to the computer (col. 5, lines 24-28) and biometric authentication 
procedures (col. 9, lines 47-54). Thus, the Examiner asserts it is inherent that 
Thomlinson teaches the method of generating biometric data of the user by 
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scanning the biometric feature of the user such as the fingerprint of the user. 
See col. 12, lines 2-59; discussing the comparing or verifying process of the 
encrypted data file. 

As per claim 23: See col. 11, lines 7-12; discussing the server configured to 
receive data encrypted using the authenticated encryption key. 
As per claim 24: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein includes an input 
device used to enter commands and information such as passwords from the 
user (col. 5, lines 24-28). Further, Thomlinson include an RF smart card (col. 7, 
lines 2- 10) for storing an encrypted data file including ah encryption key of the 
user (col. 11,. lines' 7-26) and a decrypt engine for using a password (col. 10, 
lines 1-6) to decrypt ah encrypted data file (col. 10, lines 12-15) and thereby 
generating an authenticated the encryption key of the user (col. 10, lines 15- 
25). 

As per claim 25: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col .-9, line 54). 
As per claim 26: 

The Examiner ascertains that a digitized fingerprint of the user is inherently 
one of many types of biometric data. 
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As per claim 27: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein includes an input 
devices used to enter commands and information such as a keyboard for 
entering passwords from the user arid a scanner (col. 5, lines 24-28) for 
biometric authentication procedures (col. 9, lines 47-54). Further, Thomlinson 
include an RF smart card (col.7, lines 2-10) for storing an encrypted data file 
including an encryption key of the user (col. 11, lines 7-26) arid a decrypt 
engine for using a password (cOl.10, lines 1-6) to decrypt an encrypted data file 
(col. 10, lines 12-15) and thereby generating an authenticated the encryption 
key of the user (col. 10, lines 15-25). Although, fomlinson did not discuss a 
biometric reader, however, the Examirier asserts it is inherent to include a 
biometric reader if fomlinson discloses biometric authentication procedures. 
As per claim 28: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein includes an input 
device used to enter comrriands and information such as a keyboard to receive 
a password from a user (col.5, lines 24-28). Further, Thomlinson include 
memory for storing an encrypted data file including an encryption key of the 
user (colli, lines 7-26) and a decrypt engine for using a password (col. 10, 
lines 1-6) to decrypt an encrypted data file (col. 10, lines 12-15) and thereby 
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generating an authenticated the encryption key of the user (col. 10, lines 15- 
25). 

As per claim 29: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col. 9, line 54). 
As per claim 30: 

Thomlinson teaches the encrypted data file is stored oh an RF smart card 
(col. 7, lines 2-10). 
As per claim 31: 

Thomlinson discusses the different types of access styles that can be used to 
access items (data files) in protected storage wherein includes an input devices 
used to enter commands and information such as a keyboard for entering 
passwords from the user and a scanner (col.5, lines 24-28) for biometric 
authentication procedures (col.9, lines 47-54). Although, Tomlinson did not 
discuss a biometric reader, however, the Examiner asserts it is inherent to 
include a biometric reader if Thomlinson discloses biometric authentication 
procedures. Thomlinson includes memory for storing an encrypted encryption 
key and biometric data of the user (col. 11, lines 7-12). Further, Thomlinson 
discloses a master key used to decrypt ah appropriate item key and 
corresponding item authentication key. See col. 10, lines 2-21; discussing the 
password or other logon procedure where the Examiner asserts Thomlinson 
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inherently includes password and biometric verification as the logon procedure 
(col.9, lines 52-54). 

As per claim 32: See col. 10, lines 2-6 and lines 40-42; discussing the 
password or other logon procedure where the Examiner asserts Thomlinson 
inherently includes password and biometric verification as the logon procedure 
(col.9, lines 52-54). 
As per claim 33: 

The Examiner ascertains that a digitized fingerprint of the user is inherently 
one of many types of biometric data. 
As per claim 34: 

Thomlinson includes memory for storing an encrypted encryption key 
(col. 10, lines 35-36) and includes an input devices used to enter commands 
and information such as a keyboard for entering a password from the user 
(col.5, lines 24-28) that is required the use of the password to decrypt the 
encrypted encryption key to a decrypted encrypting key (col. 10, lines 18-23). 
As per claim 35: 

Thomlinson teaches the encrypted data file is stored on an RF smart card 
(col.7, lines 2-10). 
As per claim 36: 

Thomlinson teaches the encrypted data file includes encrypted biometric data 
identifying the user (col.9, line 54). 
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As per claim 37: 

The Examiner ascertains that a digitized fingerprint of the user is 
inherently one. of many types of biometric data. 

As per claim 38: See col. 10, lines 2-6 and lines 40-42; discussing the 
password of other logon procedure where the Examiner asserts Thomlinson 
inherently includes password and biometric verification as the logon procedure 
(col. 9, lines 52-54). 
As per claim 39: 

Thomlinson discusses the different types of access styles that can be 
used to access items (data files) in protected storage wherein the method 
includes a scanner as one of the input devices used to enter commands and 
information (col. 5, lines 24-28) for biometric authentication procedures to the 
computer (col.9, lines 47-54). Thus, the Examiner asserts it is inherent that 
Thomlinson teaches the method of generating biometric data of the user by 
scanning the biometric feature of the user such as the fingerprint of the user. 
See col. 10, lines 2-6 and lines 40-42; discussing the password or other logon 
procedure where the Examiner asserts Thomlinson inherently includes 
password and biometric verification as the logon procedure (col.9, lines 52-54) 
and comparing or verifying process by decrypting the encrypted encryption key 
(col. 11, lines 15-18). 
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As per claim 40: 

Thomlirisori teaches the encrypted data file is stored on an RF smart card 
(col.7, lines 2-10). 

As per claim 41 : See col. 10, lines 20-45; discussing using the decrypted 
encryption key to encrypt the data. 



Please refer to Thomlinson, Et Al.: see col.l, Et SEQ. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to LEYNNA T. HA whose telephone number is (703) 305- 
3853. The examiner can normally be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, AYAZ SHEIKH can be reached on (703) 305-9648. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 746- 



Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 



Conclusion 



7239. 



306-5631. 
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